rop

JonathanSalwan/ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

sashs/Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

0vercl0k/rp

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

TheOfficialFloW/h-encore

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68

bkerler/exploit_me

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)

t00sh/rop-tool

A tool to help you write binary exploits

xairy/easy-linux-pwn

A set of Linux binary exploitation tasks for beginners on various architectures

Ben-Lichtman/ropr

A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative (currently x86 only)

TheOfficialFloW/Trinity

Trinity Exploit - Emulator Escape

TheOfficialFloW/h-encore-2

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.74

d4em0n/exrop

Automatic ROPChain Generation

alanvivona/pwnshop

Exploit Development, Reverse Engineering & Cryptography

VoidSec/Exploit-Development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

Hakumarachi/Bropper

An automatic Blind ROP exploitation tool

kokjo/universalrop

Small tool for generating ropchains using unicorn and z3

orppra/ropa

GUI tool to create ROP chains using the ropper API

Adamkadaban/LearnPwn

Learn Binary Exploitation with sample problems and solutions

Bw3ll/ROP_ROCKET

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.

sashs/arm_exploitation

Exploitation on ARM-based Systems (Troopers18)

0vercl0k/rp-bf.rs

rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump

entropic-security/xgadget

Fast, parallel, cross-variant ROP/JOP gadget search for x86/x64 binaries.

152334H/pwnscripts

Very simple script(s) to hasten binary exploit creation

MTJailed/UnjailMe

A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)

mrtouch93/OSED-Notes

Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.

patois/DrGadget

dr.rer.oec.gadget IDAPython plugin for the Interactive Disassembler <ABANDONED PROJECT>

cbOverhead/EasyROP

A Python tool to generate ROP chains

mariuszskon/autorop

Automated solver of classic CTF pwn challenges, with flexibility in mind.

solid-process/solid-result

Unleash a pragmatic and observable use of Result Pattern and Railway-Oriented Programming in Ruby.

woldann/NThread

Stealthy x64 thread manipulation library for calling functions inside target processes without creating remote threads or installing hooks.

grantseltzer/go-disass

A suite of tools for disassembly, ROP, and binary analysis written in Go

li4321/GhostInjector

ouspg/CompSec

Exercises for (legacy) Computer Security course in the University of Oulu

ispras/rop-benchmark

ROP Benchmark is a tool to compare ROP compilers

kriw/ropchain

ROPChain generator.

abatchy17/ROP-Emporium

Solutions for ROP Emporium challenges (https://ropemporium.com/) in python.